Issuing technical guidelines for digital signature and digital signature verification software

Ban hành hướng dẫn kỹ thuật đối với phần mềm ký số và kiểm tra chữ ký số- Ảnh 1. — The Ministry of Science and Technology has issued technical guidelines for digital signature and signature verification software.

The Circular provides specific guidance on the implementation of the provisions in Article 17 and Article 44 of Decree No. 23/2025/ND-CP dated February 21, 2025 of the Government on electronic signatures and trusted services, including technical requirements, software functions and connections to the Public Digital Signature Certification Service Portal developed by the Ministry of Science and Technology.

Requirements for digital signature software functions

According to the Circular, digital signature software and digital signature verification software must fully comply with the technical standards specified in Appendix I attached.

Digital signature software must be able to authenticate the signing subject, check the validity of the digital signature certificate before allowing signing; at the same time, allow the use of a standard secret key to perform digital signing of data messages.

The software needs to support converting data message formats, attaching digital signatures, digital signature certificates and signing times, as well as integrating digital signature certificates from the National Electronic Certification Center, public certification service providers and recognized certificates from abroad.

Additionally, the software must allow for timestamping as required, ensuring the integrity of the signed data message.

Requirements for digital signature certificate verification function

The digital signature verification software must authenticate the information in the certificate according to the regulations on electronic identification, and at the same time check the trusted path of the digital signature certificate, which is linked to the original certificate of the National Electronic Authentication Center.

Specific requirements on the validity of digital signature certificates are specified in detail in Appendix II of the Circular.

Connect to the Public Digital Signature Certification Service Portal

The software must ensure the ability to connect and exchange data with the Public Digital Signature Certification Service Connection Portal; comply with the technical connection instructions issued by the Ministry of Science and Technology.

Store and manage digital signature information

The software needs to support storing information related to signed data messages, including digital signature certificates, revoked certificate lists, and certificate status checks at the time of signing.

At the same time, the software must allow updating, changing or displaying the list of organizations providing certification services, as well as the List of trusted foreign electronic signature certificates recognized in Vietnam.

The system needs to have the function of clearly notifying the user of the digital signature results in Vietnamese, showing whether the signature was successful or unsuccessful, and allowing the download of the signed data message to the device./.

Center for Science and Technology Communication

Source: https://mst.gov.vn/ban-hanh-huong-dan-ky-thuat-doi-voi-phan-mem-ky-so-va-kiem-tra-chu-ky-so-197251015145649624.htm